Privacy
Policy.

1. Data controller

BioXpress Therapeutics SA
Route de l’Île-au-Bois 1A
1870 Monthey, Switzerland

BioXpress Therapeutics SA ("BioXpress", "we", "us") is committed to protecting your personal data in accordance with the Swiss Federal Act on Data Protection (nLPD / nDSG, revised version in force since 1 September 2023) and, where applicable, the European General Data Protection Regulation (GDPR).

2. Data we collect

Contact enquiries. When you write to us via the contact form on this website, we may collect: your name and organisation, your email address, the content of your message, and the type of enquiry you have indicated.

Server logs. When you visit our website, our hosting provider automatically records standard server log data (including your IP address, browser type, pages visited, and date and time of access) for security and performance purposes. We do not set any tracking, analytics or marketing cookies.

3. Purpose and legal basis

We use your contact details solely to respond to your enquiry and, where relevant, to follow up on potential collaboration or partnership discussions.

Legal basis: legitimate interest (Art. 31 nLPD / Art. 6(1)(f) GDPR) or, where applicable, performance of pre-contractual steps at your request.

4. Retention

Contact enquiries are retained for up to 24 months from the date of the last exchange. Server logs are retained for up to 12 months. Data is deleted once the purpose for which it was collected has been fulfilled, or upon your request.

5. Disclosure to third parties

Your personal data is never sold, rented or shared with third parties for marketing purposes. Data may be transferred to service providers acting strictly on our behalf (for example, IT infrastructure or email hosting providers), subject to appropriate contractual safeguards. We do not transfer personal data outside Switzerland or the EEA without appropriate safeguards in place.

6. Your rights

Under Swiss law (nLPD) and, where applicable, the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data
• Object to or request restriction of processing
• Lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch

To exercise any of these rights, please submit a request through our contact form.

7. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version is always available on this page. Material changes will be communicated where feasible.

Last updated: October 2026